Security and privacy
This page explains what Thallo stores, where it's kept and who else gets any of it.
Can Thallo see my bank account?
No. You type in your balances, so Thallo never needs a login for your bank, brokerage or crypto exchange, and it won't add bank connections later. That means it can't move money and can't see your transactions.
What Thallo does have is the balance you enter for each account, such as DKK 92,000 for a salary account or USD 43,500 for a brokerage. It doesn't know which funds or shares are inside the brokerage.
Does Thallo see my password?
No. Sign-in is handled by Auth0, a dedicated sign-in service, and Thallo never sees or stores your password. You can sign in with a passkey (Face ID, Touch ID, Windows Hello, or a password manager like 1Password), with Google or Apple, or with an email and password.
If you use an email and password, the email has to be verified. There's no two-factor sign-in for password users yet, so if you'd like that extra step, a passkey, Google or Apple is the better choice.
Where is my data stored?
Your data is in a managed Postgres database (Supabase, through Lovable Cloud), encrypted at rest. Your data may be stored in data centres in the US and Europe.
Every row in the database belongs to one user, and the database itself only lets you read your own rows. This is called row-level security, and it means one user can't read another user's balances.
Pages that show your numbers are never cached by the content delivery network, and balances, statement contents and tokens are never written to logs.
When you import a spreadsheet, the file is read in your browser and never leaves your device. Only the accounts and balances you confirm are saved.
Who else gets my data?
Thallo uses four outside services now, and a fifth once paid plans start.
| Service | What it does | What it receives |
|---|---|---|
| Auth0 | Sign-in | Your sign-in details |
| Lovable / Supabase | Hosting and database | Your accounts and balances, encrypted at rest |
| Anthropic | Writes Signals text, only if Signals are on | A summary of your figures |
| Google Analytics | Usage statistics, only if you agree | Which screens get used |
| Stripe | Payments, from paid launch | Your card details. Thallo never sees them. |
Signals and Anthropic
Signals are a short weekly list of things in your numbers that are worth a look. Thallo's own code finds them and does all the calculations, and an AI model from Anthropic picks which ones to show and writes the sentences.
To do that, Anthropic's API receives a summary of your figures: account names, amounts and dates. It doesn't receive your notes, institutions, statements or logins. Signals are on by default. If you turn them off in Settings, nothing is sent.
Google Analytics
Google Analytics counts which screens get used, and only once you've said yes to it. It never receives amounts, account names, notes or anything you typed. The account ID in each page address is replaced before it's sent, so a page for one of your accounts shows up as /accounts/[id]. If you say no, nothing goes to Google.
Can I export or delete my data?
Yes, on every plan. You can download everything as CSV files at any time and open them in any spreadsheet program.
Deleting your account removes everything permanently. If you sign back in within 7 days, the deletion is cancelled, but after that your data is gone.
Once Thallo becomes a paid service, stopping payment doesn't delete anything. The account goes read-only until you pay again, and you can still look at your data, export it or delete it in the meantime.
What Thallo doesn't have yet
Thallo doesn't have any security certifications or external audits yet. Your data also isn't end-to-end encrypted, because Thallo needs to read your balances in order to convert them and add them up.
If you think you've found a security problem, the contact page explains how to report it.
Getting started
You can start free, and you'll never be asked for a bank login.